Cybersecurity Analyst (MSIC) Huntsville, AL

Colsa; Huntsville (AL); On-site; USD 110,000 - 140,000; Full time

Job summary

COLSA Corporation in Huntsville, AL, seeks multiple Cybersecurity Analysts for a dual‑role position responsible for design, integration, and formal authorization of DoD information systems under RMF. You will apply ISSE principles and perform ISSO duties to ensure ATO readiness.

You will manage vulnerability remediation with ACAS/Nessus, develop security artifacts (SSP/SAR/SCTM), and support RMF lifecycle while working on-site at MSIC.

Qualifications

• Active DoD Top Secret clearance with SCI eligibility and ability to obtain CI Polygraph within 180 days of hire.
• U.S. Citizenship is required and candidates must meet SAP eligibility.
• Active Security+ CE or ISC2 SSCP (or equivalent) baseline certification and deep knowledge of NIST 800-53 controls.

Responsibilities

• Lead the design and integration of cybersecurity requirements into the SDLC.
• Manage end‑to‑end RMF process including categorization, control selection, implementation, and continuous monitoring.
• Author and maintain SSP, SAR, RAR, and SCTM as part of the Security Authorization Package.
• Direct remediation using STIGs and IAVA; analyze vulnerability scans to develop mitigations.
• Conduct formal risk assessments and manage POA&Ms to closure.

Skills

CompTIA Security+ CE

ISSE concepts

NIST 800-53

RMF Lifecycle

Vulnerability remediation

SSP/SAR/SCTM

Communication to leadership

DoD clearance basics

Education

Associate’s degree in Cybersecurity or related field

Tools

ACAS (Nessus)

SCCM/WMI/PowerShell

SCAP Compliance Checker (SCC)

Job description

COLSA Corporation is currently seeking multiple Cybersecurity Analysts for a dual-role position responsible for the design, integration, and formal authorization of complex DoD information systems. You will apply Information System Security Engineering (ISSE) principles to develop secure architectures while executing Information System Security Officer (ISSO) duties to ensure all systems achieve and maintain an Authorization to Operate (ATO) under the current approved version of the RMF. This position requires a deep technical understanding of vulnerability remediation and the ability to translate policy into actionable engineering requirements . Requireson-site work at MSIC in Huntsville, AL.

• Security Engineering & Design : Lead the integration of cybersecurity requirements into the System Development Life Cycle (SDLC); design and evaluate security architectures for compliance with NIST 800-53 and DoD Cyber-survivability requirements.
• RMF Lifecycle Management : Manage the end‑to‑end Risk Management Framework (RMF) process, including system categorization, control selection, implementation, and continuous monitoring within approved software .
• Artifact Development : Author and maintain a comprehensive Security Authorization Package including the System Security Plan (SSP), Security Assessment Report (SAR), Risk Assessment Report (RAR), and Security Control Traceability Matrix (SCTM).
• Technical Remediation : Direct the application of Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Alerts (IAVA); perform root‑cause analysis on vulnerability scan results (ACAS/Nessus) to develop mitigation strategies.
• Risk Assessment : Perform formal risk assessments; document residual risks and manage the Plan of Action and Milestones (POA&M) to ensure timely closure of findings.

At COLSA, people are our most valuable resource and are at the center of our core values. We invite you to unite your talents with opportunity and become part of our “Family of Professionals!” Learn more about our employee‑centric culture and benefits here: https://colsa.com/culture_benefits

Required Experience

Required Qualifications

• Associate ’s degree (or higher) in Cybersecurity, Information Technology, or a related field , or equivalent experience (Positions may be filled at varying levels based on education and experience.)
• Minimum of 0 –12 years of related experience; position may be filled at varying levels based on experience.
• Must posse ss an a ctive CompTIA Security+ CE, ISC2 SSCP, or equivalent baseline certification.
• Deep knowledge of NIST 800-53 security controls and their technical implementation.
• Demonstrated experience managing vulnerabilities in DoD environments.
• Specialist in authoring and reviewing high‑stakes security artifacts, including System Security Plans (SSP), Security Assessment Reports (SAR), and Security Control Traceability Matrices (SCTM).
• Demonstrated ability to communicate complex cybersecurity situations to non‑technical leadership in an actionable form.
• U.S. Citizenship required; Must possess an active DoD Top Secret clearance with SCI eligibility. Candidates must be able to successfully complete a Counterintelligence (CI) Polygraph within a 180 days of hire date and meet eligibility requirements for Special Access Programs (SAP)

Preferred Qualifications

• Active DoD Top Secret Clearance with SCI and a Counterintelligence (CI) Polygraph with willingness to meet Special Access Program (SAP) eligibility requirements.
• Holds an active ISC2 CISSP .
• Expert at leveraging enterprise tools like SCCM, WMI, and PowerShell to automate the deployment of security patches and configuration changes across workstations and servers.
• Proficient in utilizing ACAS (Nessus) and SCAP Compliance Checker (SCC) to identify vulnerabilities and perform root‑cause analysis to determine system applicability and risk.
• System administration security a plus.

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Salary Type

Annually

The salary range, if referenced, represents a good faith estimate. COLSA considers various factors when determining base salary offers, but not limited to, location, the role, function and associated responsibilities, a candidate’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific affordability and organizational requirements.

COLSA offers a comprehensive and customizeable benefits program which includes Medical, Dental, Vision, Life Insurance, Short‑Term Disability, Long‑Term Disability, Accidental Death & Dismemberment, Supplemental Income Protection Programs, 401(k) with company match, Flexible Spending Accounts, Employee Assistance Program, Education & Certification Reimbursement, Employee Discount Program, Paid Time Off and Holidays.

This position will be posted for a minimum of 3 business days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.